2 Commits

Author SHA1 Message Date
NimBold 1c5895156a fix(release): inspect AppImage SquashFS at runtime offset
- Read SquashFS permissions after locating the embedded filesystem.
- Reject malformed and unsafe AppImage offsets.
- Cover offset parsing with regression tests.
2026-10-10 00:11:51 +03:30
NimBold ce31dccd88 fix(appimage): harden packaging for catalog compatibility
- Normalize and verify launcher, AppDir, and GTK hook permissions before and after repacking.

- Reject unsupported target triples before deriving or deleting payload paths.

- Align the published AppImage filename with catalog discovery and document the host glibc floor.

- Add regression coverage for permission, layout, symlink, and target traversal failures.
2026-09-29 14:14:54 +03:30